4785 matches found
The vulnerability of the file-sharing mechanism of Nighthawk WiFi 6 Router (RAX30) allows a hacker to increase their privileges.
The vulnerability of the file-sharing mechanism of the Nighthawk WiFi 6 Router RAX30 software lies in the deficiencies of its authentication process. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...
CVE-2023-27389
Inadequate encryption strength vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker with an administrative privilege to apply a specially crafted Firmware update file, alter the information, cause a denial-of-service DoS condition, and/or execute arbitrary code...
Wondershare Dr Fone 12.9.6 - Privilege Escalation Vulnerability
Exploit Title: Wondershare Dr Fone 12.9.6 - Privilege Escalation Exploit Author: Thurein Soe Vendor Homepage: https://drfone.wondershare.com Software Link: https://mega.nz/file/ZFd1TZIRe2WfCXryaH08C3VNGZH1yAIG6DU01p-MrDooq529I Version: Dr Fone version 12.9.6 Tested on: Window 10 10.0.19045.2604 C...
modoboa 2.0.4 Admin Takeover
/ Exploit Title: modoboa 2.0.4 - Admin TakeOver Description: Authentication Bypass by Primary Weakness Date: 02/10/2023 Software Link: https://github.com/modoboa/modoboa Version: modoboa/modoboa prior to 2.0.4 Tested on: Arch Linux Exploit Author: 7h3h4ckv157 CVE: CVE-2023-0777 / package main...
modoboa 2.0.4 - Admin TakeOver
/ Exploit Title: modoboa 2.0.4 - Admin TakeOver Description: Authentication Bypass by Primary Weakness Date: 02/10/2023 Software Link: https://github.com/modoboa/modoboa Version: modoboa/modoboa prior to 2.0.4 Tested on: Arch Linux Exploit Author: 7h3h4ckv157 CVE: CVE-2023-0777 / package main...
modoboa 2.0.4 - Admin Account Takeover Exploit
/ Exploit Title: modoboa 2.0.4 - Admin TakeOver Description: Authentication Bypass by Primary Weakness Software Link: https://github.com/modoboa/modoboa Version: modoboa/modoboa prior to 2.0.4 Tested on: Arch Linux Exploit Author: 7h3h4ckv157 CVE: CVE-2023-0777 / package main import "fmt"...
Cisco Small Business 跨站脚本漏洞
Cisco Small Business is a switch from Cisco USA. A security vulnerability exists in the Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325, which stems from insufficient validation of inputs to the web-based management interface...
PT-2023-2623 · Nexx · Nexx Garage Door Controller +3
Name of the Vulnerable Software and Affected Versions: Nexx Smart Home devices affected versions not specified Nexx Garage Door Controller NXG-100B, NXG-200 Nexx Smart Plug NXPG-100W Nexx Smart Alarm NXAL-100 Description: The issue is related to weaknesses in the authentication procedure of Nexx...
The vulnerability in the web interface of the Aruba Networks ClearPass Policy Manager allows a attacker to execute XSS attacks.
The vulnerability in the web interface of the Aruba Networks ClearPass Policy Manager exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...
The vulnerability of the File Sharing component in the Nighthawk WiFi 6 Router (RAX30) microprogramming software allows a hacker to gain access to arbitrary files.
The vulnerability of the File Sharing component in the Nighthawk WiFi 6 Router RAX30 microprogramming software lies in insufficient access control. Exploiting this vulnerability can allow a remote attacker to gain access to arbitrary files...
The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the lack of authentication procedures, which allow attackers to circumvent existing security restrictions.
The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions remotely...
The vulnerability of the Kubernetes cloud platform Red Hat OpenShift Data Science (RHODS) allows a hacker to send arbitrary API requests.
The vulnerability of the Kubernetes cloud platform Red Hat OpenShift Data Science RHODS is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to send arbitrary API requests remotely...
ABB Central Licensing System Uncontrolled Resource Consumption (CVE-2020-8475)
For the Central Licensing Server component used in ABB products ABB Ability System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphony Plus -S+ Operations 3.0 to 3.2 Symphony Plus -S+ Engineering 1.1 to...
The vulnerability of the Zabbix universal monitoring system, related to the lack of measures taken to protect the website structure, allows attackers to compromise data integrity.
The vulnerability of the Zabbix universal monitoring system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...
The vulnerability of the central control module of the Rittal CMC III system, due to deficiencies in access control, allows unauthorized access by intruders to protected information and enhances their privileges.
The vulnerability of the central control block of the Rittal CMC III system is related to deficiencies in access control. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information and enhance their privileges by cloning the access card used to open...
The vulnerability of the microprogramming software of Zyxel LTE3202-M437 and LTE3316-M604 allows attackers to enhance their privileges and gain access to the device.
The vulnerability of Zyxel LTE3202-M437 and LTE3316-M604 router microprogramming software is related to deficiencies in access control. Exploiting this vulnerability can allow a remote attacker to enhance their privileges and gain access to the device via the TELNET network protocol...
The vulnerability in the implementation of the Point to Point Tunneling Protocol (PPPT) for Windows operating systems allows a perpetrator to increase their privileges.
The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
PT-2023-14726 · Bofei · Bofei Dbd+ Application
Name of the Vulnerable Software and Affected Versions: BOFEI DBD+ Application for IOS & Android version 1.4.4 Description: An insecure password reset issue was discovered in the BOFEI DBD+ Application for IOS & Android service due to an insecure expiry mechanism. Recommendations: For version 1.4....
CVE-2023-0353 CVE-2023-0353
Akuvox E11 uses a weak encryption algorithm for stored passwords and uses a hard-coded password for decryption which could allow the encrypted passwords to be decrypted from the configuration file...
